Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
File: 3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft (raw, json)
Hash identifier: /HVmsN9CzFRWWcU7XxNhpZ2wJTxbrQ+KM6e9MRp2TNI=
Subject key identifier: D3:DA:C1:A8:16:13:D9:9C:D7:08:A9:AD:72:73:11:BD:8A:BD:C0:D5
Authority key identifier: 3B:D4:42:B9:D6:4F:EA:0E:55:58:7E:E1:CF:BE:67:ED:41:3C:87:50
Certificate issuer: /CN=3bd442b9d64fea0e55587ee1cfbe67ed413c8750
Certificate serial: 069D1CB271C4E7350694E8934D9B497A66342694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
Manifest number: 1A
Signing time: Thu 30 Apr 2026 07:17:56 +0000
Manifest this update: Thu 30 Apr 2026 07:12:56 +0000
Manifest next update: Fri 01 May 2026 09:51:56 +0000
Files and hashes: 1: 3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl (hash: GoeVvg7SjK49tkVPbZmA5lB/I8WZK/qLfb7yZs1Oo4M=)
2: AS199746.asa (hash: b+hH5Q4it4yLsnEfmVi18jipNmhscoV/a1E9nlNnSu0=)
3: AS204464.asa (hash: qjzhUzlM7ddTgdWjz3vsyJhe493aRAF64q9a6Azxnjs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl
rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9d:1c:b2:71:c4:e7:35:06:94:e8:93:4d:9b:49:7a:66:34:26:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd442b9d64fea0e55587ee1cfbe67ed413c8750
Validity
Not Before: Apr 30 07:12:56 2026 GMT
Not After : May 1 09:51:56 2026 GMT
Subject: CN=D3DAC1A81613D99CD708A9AD727311BD8ABDC0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:22:cb:8f:45:08:9a:1b:53:53:52:64:1b:
2d:1b:5d:52:29:3c:82:0c:6c:c0:8f:4d:ac:01:fb:
3e:8a:be:04:8a:e8:62:58:7b:ea:3b:09:ec:07:59:
c6:1f:2b:2e:b3:85:46:c4:4c:38:6e:ba:df:1c:04:
86:82:ab:50:9e:de:9e:f7:cf:2a:24:72:68:f3:9a:
b1:cd:29:f3:02:5b:68:f6:50:fd:53:64:e7:02:30:
38:65:2c:87:2f:48:22:6e:4a:e0:8e:ee:ea:ee:22:
15:ba:24:c1:3c:46:d9:f7:b5:8d:a8:72:55:30:c2:
9a:70:26:47:d1:f1:2e:6e:38:5d:06:07:af:6a:47:
e3:16:f2:57:68:9d:76:b2:76:fc:ec:49:50:14:58:
da:b1:6f:d1:04:57:0f:a1:4a:97:65:bd:ce:f8:cc:
c8:3d:01:55:f2:ea:e8:02:55:55:14:ed:c3:c6:1b:
70:2a:67:bd:ce:b8:18:76:24:81:3a:59:89:99:c5:
66:fe:a3:3f:74:d5:5c:e3:b5:66:47:d6:bb:98:22:
04:95:ff:a6:1b:c9:6f:43:df:01:2b:1e:92:40:4b:
b8:d8:e6:1a:74:65:eb:f5:86:1d:cf:96:e0:0f:a8:
f3:f5:ec:c9:c8:3d:a8:ec:35:ef:07:cd:b2:f2:dd:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:C1:A8:16:13:D9:9C:D7:08:A9:AD:72:73:11:BD:8A:BD:C0:D5
X509v3 Authority Key Identifier:
keyid:3B:D4:42:B9:D6:4F:EA:0E:55:58:7E:E1:CF:BE:67:ED:41:3C:87:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bf:e6:c1:cd:5f:a6:ef:14:45:30:e2:f2:50:a7:ed:47:84:
06:c4:bb:4f:ec:31:69:e6:6a:2c:e5:6b:07:8c:04:22:83:2f:
5c:8e:f8:fb:da:b8:40:f8:f1:99:77:f1:37:eb:3e:8d:bf:b9:
87:90:4c:37:29:7d:a6:38:b2:e1:e5:96:91:39:2e:8c:11:ee:
6a:a5:e6:c8:f6:a6:8b:5d:ba:ff:08:9b:ff:74:95:dd:51:9e:
5f:50:89:c4:2b:11:21:11:36:46:64:ac:64:a8:9c:b1:57:e0:
e4:9a:a5:d1:a4:e4:f7:ed:73:46:6c:65:d4:54:da:f6:6d:4f:
7f:63:df:85:57:93:4f:66:62:04:00:0d:ba:cf:d5:0a:fa:ce:
52:1e:e0:84:ff:d4:1f:1d:df:d8:d3:dc:9a:ec:3a:17:48:76:
64:c8:c9:4d:a8:5c:f7:65:5a:44:39:8e:10:96:a4:ba:37:8f:
64:cc:94:e2:ac:64:07:62:15:62:e1:c3:c1:35:38:9d:72:54:
3e:87:be:69:a3:d6:23:b9:76:86:96:8f:e9:3c:17:97:d8:f2:
03:4b:b4:fb:f0:ed:55:f8:44:7a:02:93:2b:d3:42:1f:a9:f2:
79:be:2b:c8:a9:62:03:42:91:d3:d0:96:da:2b:f3:f0:86:e1:
78:86:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:18 2026 by rpki-client